GRSecurity how to patch my kernel

How much is that necessary to install GRSecurity or updating to redhat's latest maintained kernel is enough?

Would you please help me how to path my kernel with GRSecurity?

1) Is it possible to patch it via remote SSH connection?
2) Should I install GRSecurity RPMs or patch my current kernel?
2) Which level of GRSecurity should I use LOW, MEDIUM, HIGH?
3) Every time that I upgrade Kernel should I apply GRSecurity too?
4) Should I use IPtable RPM package which is come with GRSecurity?